Cloud Storage always encrypts your data on the server side, before it iswritten to disk, at no additional charge. This page discusses the standardencryption that Cloud Storage performs. For other encryption options,see Data Encryption Options.
Cloud Storage manages server-side encryption keys on your behalf usingthe same hardened key management systems that we use for our own encrypted data,including strict key access controls and auditing. Cloud Storageencrypts user data at rest using AES-256, in most cases usingGalois/Counter Mode (GCM). There is no setup orconfiguration required, no need to modify the way you access the service, andno visible performance impact. Data is automatically decrypted when read by anauthorized user.
For more information about how Google Cloud and Cloud Storage manageencryption keys, see Default encryption at rest.
To protect your data as it travels over the Internet during read and writeoperations, use Transport Layer Security, commonly known as TLS or HTTPS.
What's next
For more information about how Google-owned and Google-managed keys are rotated, managed,and stored, see Key management.
See Encryption at the storage system layer to learn about theencryption modes that are used in Google Cloud.
Learn more about Choosing an encryption option.
Except as otherwise noted, the content of this page is licensed under the Creative Commons Attribution 4.0 License, and code samples are licensed under the Apache 2.0 License. For details, see the Google Developers Site Policies. Java is a registered trademark of Oracle and/or its affiliates.
Last updated 2024-09-10 UTC.
[{ "type": "thumb-down", "id": "hardToUnderstand", "label":"Hard to understand" },{ "type": "thumb-down", "id": "incorrectInformationOrSampleCode", "label":"Incorrect information or sample code" },{ "type": "thumb-down", "id": "missingTheInformationSamplesINeed", "label":"Missing the information/samples I need" },{ "type": "thumb-down", "id": "otherDown", "label":"Other" }] [{ "type": "thumb-up", "id": "easyToUnderstand", "label":"Easy to understand" },{ "type": "thumb-up", "id": "solvedMyProblem", "label":"Solved my problem" },{ "type": "thumb-up", "id": "otherUp", "label":"Other" }]
